Privacy Policy

What we collect

• Email address — provided when you create an account.
• IP address — recorded when a client submits an approval or change request.
• Browser user agent — recorded alongside the IP address in approval records.
• File uploads — artwork files uploaded by shop owners for client review.

Why we collect it

Email addresses are used for account authentication. IP addresses and user agents are recorded as part of timestamped approval records, which serve as evidence that a client reviewed and responded to a proof. File uploads are stored so clients can download and review artwork.

Who can see your data

Only the shop owner who created a proof can see its approval records, file uploads, and client responses. Clients can only access proofs via unique, unguessable links.

Where data is stored

Data is stored on Supabase (hosted on AWS) for database and file storage, and Vercel for application hosting. Both providers maintain industry-standard security practices.

Data retention

Files and approval records are kept until the shop owner deletes them. Account data is retained for the lifetime of the account. If you delete your account, your data will be removed.

No selling, no sharing, no ads

We do not sell or share your data with third parties. We do not use advertising or third-party tracking on Noddly.

Contact

For data requests or questions about this policy, contact us at contact@yfi-global.com.